■ WordPress Performance Optimisation · Core Web Vitals

"WordPress is slow" is a symptom. We sell the diagnosis.

/var/log/nginx/access.log · anonymised

CASE 2024

# normal traffic
2024-XX 03:14:22 "GET /boiler-cover/ HTTP/2" 200 28102 "..." 0.34
2024-XX 03:14:22 "GET /assets/main.css HTTP/2" 200 14201 "..." 0.02

# attack starts — PHP-FPM exhausted
2024-XX 03:18:01 "GET /boiler-cover/?v=8a3f HTTP/2" 504 -    "..." 30.00
2024-XX 03:18:01 "GET /boiler-cover/?v=2c7e HTTP/2" 504 -    "..." 30.00
2024-XX 03:18:02 "POST /wp-load.php?x=4d HTTP/2" 200 1 "..." 0.41   <-- backdoor poll
2024-XX 03:18:02 "POST /v1/wp-load.php?z=a9 HTTP/2" 200 1 "..." 0.39

Two hours into the diagnostic: not a caching problem. ASN-level Cloudflare block + backdoor remediation restored service.

Ritesh Agarwal, lead architect at Appycodes

■ Diagnostic — talk to the lead architect

WP / Woo site slow under real traffic, or speed-test failing under load? Bring it directly to Ritesh — no SDR, no qualification call.

Ritesh Agarwal · Lead Architect, Appycodes · LinkedIn

Start a project discussion Or call +91 92429 45793

■ Before / After

Real numbers from a recent engagement.

LCP

5.8s

1.4s

deferred non-critical JS · WebP pipeline · ISR-equiv cache · edge revalidation

PHP-FPM workers

exhausted at peak

head-room x3

pool tuning · fastcgi_read_timeout reduced · Cloudflare absorbing bot traffic

DB query count / pageload

142

object cache (Redis) · removed un-indexed plugin queries · transient cleanup

PHP version

7.4 (EOL)

8.2

plugin compatibility pass · deprecation review · staged rollout

■ Things plugins quietly do to your performance

Six common culprits we've fixed in production.

AutomateWoo bundles its own Guzzle

Conflicts with other plugins. The fix is keeping migration / cron scripts WP-free.

WPML doubles payment gateways on multilingual checkout

Symptom: duplicate card fields. Root cause: wp_loaded patch missing.

Themes with un-indexed SQL queries

Linear scaling with post count. Visible only at 10K+ posts. Fix: EXPLAIN, add indexes.

ACF on every page load with no cache

Costs ~50ms per uncached request. Object cache + selective wrapper functions.

Cart fragments on every page (Woo)

AJAX heartbeat killing TTFB on non-cart pages. Conditional load.

Autoload bloat in wp_options

MBs of option_value autoloaded on every request. Audit + remove.

■ What you get

Seven engagements.

Server diagnosis

nginx logs, PHP-FPM pool tuning, slow query log, MySQL EXPLAIN analysis.

PHP upgrades 7.x → 8.x

Plugin and theme compatibility work that comes with them.

Cache strategy (multi-layer)

Object cache (Redis / Memcached), page cache (WP Rocket / LiteSpeed), Cloudflare edge rules.

Plugin audit

Identifying which plugins are quietly eating performance. Replace, remove, or fix.

Database optimisation

Autoload bloat, transient cleanup, orphaned postmeta, missing indexes.

Core Web Vitals

LCP under 2s, CLS under 0.1, INP under 200ms. Inside WordPress, not by abandoning it.

WooCommerce performance

Cart fragments, AJAX bloat, checkout query reduction, supplier-feed caching.

▼ The Performance Stack Audit

Where the seconds actually go.

Eleven layers of a slow WordPress page load. Typical millisecond budget on the left; where we usually find the problem on the right.

L01

DNS

20–80 ms

Cloudflare resolves fast; legacy DNS providers don't.

L02

TLS

30–120 ms

HTTP/3 + 0-RTT on Cloudflare; older origins are slower.

L03

Edge cache (HIT)

10–40 ms

Where we want most requests to terminate.

L04

Edge cache (MISS) → origin

+ origin RTT ms

Wrong cache keys land here.

L05

nginx

5–15 ms

Healthy. Slow logs = upstream PHP-FPM problem.

L06

PHP-FPM queue

0 or seconds ms

0 = healthy. Seconds = pool exhausted.

L07

PHP execution + plugins

150–1200 ms

Where most fixable time lives.

L08

Theme queries → MySQL

20–800 ms

EXPLAIN + indexes. Un-indexed queries scale linearly.

L09

Response

5–40 ms

Gzip / brotli compression.

L10

Asset delivery

50–300 ms

Image pipeline, defer non-critical JS, font display swap.

L11

Browser render

100–500 ms

CLS fixes, hydration cost on heavy themes.

■ Good fit if

WordPress / WooCommerce sites with Speed scores under 50 and a real revenue downside
Stores with PHP-FPM exhaustion, nginx upstream timeouts, or unexplained traffic-driven outages
Sites on EOL PHP versions where the upgrade itself is the performance project
Operators tired of caching-plugin advice that didn't actually fix the underlying problem

■ Probably not a fit

Brand-new sites with no real users yet — premature optimisation
Pure marketing sites where Speed 90 is achievable with WP Rocket in an afternoon
Buyers expecting the bottleneck to be solved by a plugin install (it isn't)

Pair with maintenance & support for ongoing patching, Cloudflare edge engineering for the cache rules, security work when the slowness has a security cause, and technical SEO for the Core Web Vitals side that affects rankings.

■ Tools we use

Boring, deliberate, runbook-driven.

Web server

nginx · PHP-FPM · fastcgi tuning · access + error log analysis

PHP

7.x → 8.x upgrades · OPcache · realpath cache · deprecation review

Cache

Redis / Memcached object cache · WP Rocket / LiteSpeed page cache · Cloudflare edge

Database

MySQL · slow query log · EXPLAIN · index design · transient + autoload cleanup

Frontend

image pipeline · defer non-critical JS · font display swap · CLS audit

■ Diagnose first

Bring the URL, the speed test, and access to the nginx logs.

Open a performance review

■ Other services

We build a lot more than this.

Explore the rest of what we build.

SaaS Web App Development

MVP to production builds, multi-tenant, billing, AI features.

Learn more

React Native App Development

iOS + Android in one codebase. Push, offline, OTA updates.

Learn more

Web App to Native Mobile App

Convert your Lovable / Claude / Bolt web app to React Native or Flutter — backend reused.

Learn more

Technical SEO for SaaS

Prerender, schema, Core Web Vitals — engineering-led SEO.

Learn more

Custom WordPress Development

B2B marketplaces, membership sites, headless WordPress.

Learn more

Shopify Development Services

Custom themes, migration to Shopify, Shopify apps, supplier-feed automation.

Learn more

Custom WooCommerce Development

B2B wholesale, high-SKU catalogues, WooCommerce Subscriptions, Shopify-to-Woo migrations.

Learn more

Maintenance & Support

Post-launch stability, security, monthly improvements.

Learn more

AI App Completion

Take an AI-built prototype to a production-ready product.

Learn more

AI Prototype to Native App

Convert AI-built web prototypes into native mobile apps.

Learn more

App Store Launch

Submit, configure and optimise for App Store + Play Store.

Learn more

Tech Stack Migration

Modernise legacy systems with zero-downtime migrations.

Learn more

White Label Development

Engineering capacity for agencies, under your brand.

Learn more

Startup Launch Support

From idea to live product — design, build, launch, growth.

Learn more

API & Integration

Custom REST/GraphQL APIs and third-party integrations.

Learn more

AI SaaS Product Development

Multi-tenant AI SaaS with subscriptions and admin dashboards.

Learn more

B2B Marketplace Development

Marketplaces with credit, KYC, and trust infrastructure baked in.

Learn more

Custom LMS Development

Customised Moodle deployments and bespoke Moodle mobile apps.

Learn more

Membership & WooCommerce Subscriptions

Subscription recovery, dunning, migrations, combinatorial billing matrices.

Learn more

Shopify Migration

Magento, WordPress, BigCommerce → Shopify. Redirect-engineering first.

Learn more

WordPress Security & Malware Removal

Forensic incident response — Magecart, backdoors, DDoS, GDPR Art. 33.

Learn more

Laravel Development & Modernisation

Four production Laravel platforms. ERPs, contracts, tendering.

Learn more

Stripe Billing Engineering

Webhooks, metering, proration, dunning, multi-currency, reconciliation.

Learn more

Cloudflare Edge Engineering

Workers, R2, WAF, Bulk Redirects. The full surface, not just the orange cloud.

Learn more

Internal Tools & Admin Dashboards

Tender automation, contract operations, compliance calendars, calculators.

Learn more

Supabase Development

RLS, multi-role auth, production-hardening Lovable / Bolt / v0 prototypes.

Learn more

Headless WordPress & WooCommerce

WP + Next.js with preview, ISR, auth handoff, media pipeline, search.

Learn more

Sanity CMS Development

Schema-first builds, multilingual setups, migrations from WP / Contentful / Strapi.

Learn more

Vue.js & Nuxt Development

Four production Vue platforms. Vue + Laravel as the default pairing.

Learn more

Custom WordPress Plugin Development

Surgical plugin work — namespaced, idempotent, version-controlled. Not functions.php.

Learn more

Knowledge Base & Community Platforms

KB + forum + adjacent surfaces. Search, version-aware routing, role-based visibility.

Learn more

Event Ticketing Platforms

Multi-day festivals, white-label venue groups, offline-capable door-staff apps.

Learn more

AI Chatbot, RAG & Agent

Production RAG with chunking, hybrid retrieval, reranking, grounding, eval.

Learn more

Workflow Automation

Make.com, n8n, Zapier, and custom Node workers — chosen by volume.

Learn more

Programmatic SEO Engineering

Calculator- and location-driven SEO surfaces with real data and SSR.

Learn more